Privacy Policy

Information We Collect

What we collect depends on how you use bibip:

• Account information — if you register, we collect the email address, optional display name, and password you provide. Passwords are never stored in plain text; we store only a one-way cryptographic hash.
• Signing in with Google or Telegram — if you sign in with Google, we receive your name, email address and profile photo from Google. If you sign in with Telegram, we receive your Telegram user identifier, name, username and profile photo, and Telegram asks whether you also agree to share two optional things: your phone number, and permission for our Telegram bot to send you messages. Sharing them is up to you, and signing in works the same without them. If you share your phone number, we save it as the phone number on your Personal information page only when that field is empty, and you can remove it there at any time. If you allow bot messages, we record that you allowed them; we may use this to send you preparation reminders (see “Preparation reminders” below), and you can stop them at any time by blocking the bot in Telegram or by unsubscribing. Telegram never shares your email address with us. We store this data only to sign you in, to show your name and photo in your account and, for the phone number, to be able to reach you about your account (and, only as a one-way hash, to measure our ads on Meta — see “Meta” below). You can disconnect either one on the Personal information page, as long as another way to sign in remains.
• Personal information you add — on the Personal information page you can change your name, add or change your email address (the change takes effect only after you confirm it through a link we email to the new address) and add a phone number. The phone number is optional and a number you type is not verified; we use it to be able to reach you about your account and, only as a one-way hash, to measure our ads on Meta (see “Meta” below); we never send you advertising by phone, and you can remove the number at any time by clearing the field.
• Quiz and learning activity — once you're signed in, we record the practice groups, exams, and custom tests you start, the questions you were shown, the option you selected for each confirmed answer, whether it was correct, and your resulting scores, as well as the questions you save to your account (saved questions) and when you saved them. This is what powers your progress tracking, best scores, wrong-answer review, and the spaced review of your mistakes.
• Guest practice — if you practice without an account, your answers and progress are not saved in our database. They live only in your browser's temporary session storage and disappear when you close the tab or clear your browser data. If you save questions or practice as a guest, the saved question numbers and, for mistake review, the language of each question you answered wrong, when you answered it and how many times in a row you have since answered it correctly are kept in your browser's local storage — not on our servers — until you remove them or clear your browser data. When you sign in, your saved questions are copied to your account and removed from the browser. So that we know which questions people find hardest, the site also sends us, for each guest answer, only the question number, whether the answer was right and whether it was an exam or practice; this reaches our server logs (see “Server logs” below) and is not linked to any account.
• Contact form — if you use our Contact form, we collect the name, email address, optional phone number, and message you submit. This is forwarded directly to our team through a private messaging channel (Telegram) so we can respond. We do not store contact-form submissions in our database.
• Server logs and technical data (IP address) — like most websites, our web server records each request in its access log: your IP address, the date and time, the address of the page requested, the referring page and your browser type. A few anonymous statistics signals from the site also end up in these logs: which buttons and links are pressed on which page (only their labels, never anything typed into fields), page-speed measurements and the guest answer statistics described above. We use these logs to protect the site from abuse, to find errors and to count, in aggregate, how the site is used. Our team keeps a copy of the logs for this analysis, and in our analytics database the IP address is replaced by a one-way hash. To protect forms from abuse, we also count requests per IP address in a short-lived, in-memory counter that clears automatically.
• Cookies and browser storage — a session cookie set when you log in, so you stay signed in (valid up to 7 days); for teachers, a bibip_cabinet cookie that remembers whether their teacher or student cabinet opens; local-storage entries that remember your light/dark theme preference, your cookie choice and, if you use them, your saved questions, mistake review and the online lesson settings described in “Online Lessons” below; and session-storage entries that hold your in-progress quiz answers on your own device so you don't lose them navigating between questions. Analytics and advertising cookies are on by default: Google Analytics (_ga, _ga_*), Google's advertising cookies (such as _gcl_au), the Meta Pixel (_fbp, _fbc), Microsoft Clarity (such as _clck, _clsk) and our own anonymous visitor id, bibip-vid (a random number kept for up to a year and used only to match Meta events). You can turn them all off at any time with “Decline” in the cookie banner, or later via “Cookie settings” at the bottom of the page; your choice is remembered in your browser and in the bibip-consent cookie, so our server respects it too. If you visit from the European Economic Area, the United Kingdom or Switzerland, Google's cookies are set only after you click “Allow”.
• Review reminders — if you switch on the daily reminder, we store what your browser gives us to deliver a notification: the notification address your browser's push service issues (a long random URL that identifies that browser and nothing else), the two keys the notification is encrypted with, the language, the hour you chose and your time zone, plus your account id if you are signed in. We do not store your IP address, your device name or anything about your answers, and the notification itself only ever contains fixed text and, for signed-in users, how many questions are due — never a question, an answer or a score. A random cancellation code is kept in your browser so this device can switch the reminder off again. Switching it off deletes the record immediately, and we delete it automatically as soon as the push service tells us the browser no longer accepts notifications. You can subscribe without an account.
• Preparation reminders — we may send you reminders to come back and keep preparing, through the Telegram bot (if you allowed bot messages), by email (to the address of your account) and as web-push notifications (if you switched them on). Email reminders are sent only if you agreed to them when you registered. We keep a delivery log that contains no message text and no addresses: only your user id, the number of the reminder, the channel, the delivery status and the date. Every reminder can be switched off in one click through the unsubscribe link in it, or with a switch in your account; after that we stop sending reminders. To measure whether reminders actually help, some users may deliberately not receive them.
• Question problem reports — if you tell us something is wrong with a question, we store which question it was, the reason you picked from the list, the optional note you wrote, and your account id if you are signed in. You can report a problem without an account, and then the report carries no account id at all. We do not store your IP address or your device name. The report is read only by our team, to correct the question.
• Messages in your account — when you are signed in, the bell at the top of your account shows messages from bibip: news, our replies to problems you reported and, later, surveys. For each message sent to you we store whether it appeared in your list, whether and when you opened it, when you marked it as read, and roughly how long it was on your screen (counted only while the page is visible; a visit longer than 30 minutes is not counted). We use this only to see whether our messages are useful and to improve them. If you answer a survey, we store your answers, the language you answered in, and how long answering took; the answers are linked to your account, and answers you have not sent yet are saved so you can continue later. Some surveys let you tick “Answer anonymously”: your answers are then stored with no account and only the date, so our team cannot tell who gave them; on such a survey your unsent answers are kept only in your browser. We only record that you answered it, so it is not shown to you again. These records are deleted together with your account.

How We Use Your Information

We use the data described above to:

• provide the exam-practice service — create and grade quiz sessions and show your progress;
• authenticate you and keep your account secure, including enforcing account blocks and issuing password-reset links;
• respond to messages sent through the Contact form;
• understand which topics and questions are hardest across all students, in aggregate, so we can improve the question bank;
• send you preparation reminders, where you have agreed to them, and measure whether they help;
• run online lessons — connect you to the lesson, keep your place, show the teacher who signed up and came, and remind you before it starts;
• measure which of our ads on Google and Meta bring people who actually use the site, and build audiences for those ads;
• comply with legal obligations and enforce our terms.

Top Students List

Signed-in students see a weekly and a monthly list of the students with the most points, which come from practice answers and mock exams. On it, other students see your first name and the first letter of your surname (filled in from your Google or Telegram account, or as you set them), an avatar with your initials or the Google or Telegram photo you chose, your points, the number of exams you passed and of correct answers, and your current run of passed exams. Your full surname, email address, phone number and Telegram username are never shown. Only signed-in students see the list — visitors without an account and search engines don't. You are on it by default, on the basis of our legitimate interest in motivating students to practise; you can turn it off, and change the name and avatar it shows, at any time in Profile → Settings. Names on the list are checked automatically against words that aren't allowed, and our moderators may hide a name or take someone off the list if it breaks these rules.

Online Lessons

bibip may hold live online lessons on driving theory, and only signed-in accounts can take part. Your camera and microphone are used only after you allow them in your browser and only while you keep them on; the preview before you enter is shown only to you. During a lesson the teacher and the other participants see and hear you while your camera and microphone are on, and they see the name you chose for the lesson (your account name unless you change it — never your email address), your chat messages and a raised hand. Answers to the teacher's questions for the class go to the teacher, who sees only the totals. The teacher can lower a raised hand, switch off a participant's microphone and camera (the participant can switch them back on) or remove someone from the lesson.

Video, sound, chat messages, answers and the shared board travel in real time through LiveKit Cloud, the video service we use (see “Who We Share Data With” below). We don't record lessons, and we don't store their video, sound, chat or board: they are gone when the lesson ends.

When you sign up for a scheduled lesson, we store that you signed up and when, the language of the page you signed up on, whether you came (the first time you entered the lesson) and whether we have reminded you. The lesson's teacher sees the names of the students who signed up and who came, never their email addresses or phone numbers. About an hour before the lesson we send one reminder to your account's email address and as a notification to the browsers where you switched notifications on. It is part of the lesson you asked for, so it is sent even if you turned preparation reminders off; cancelling the sign-up stops it. The name you chose for lessons, your camera and microphone choices and whether background blur is on are kept only in your browser's local storage. Background blur runs on your device: when you switch it on, your browser downloads the blur model from Google and jsDelivr, and no video is sent to them.

Teachers are invited by our team: we store the invited email address and whether and when the invitation was accepted, and we may email the invitation link. A teacher's name, short bio and photo, if they add them, are shown to students in the lesson list and before the lesson. We keep a log of what teachers do (lessons created, changed or cancelled, the materials they chose and moderation in a lesson) that never names a student.

We Do Not Sell Your Data or Show Ads on the Site

There are no ads on bibip.am, and we don't sell or rent your personal data to anyone. We do advertise bibip itself on Google and Meta (Facebook, Instagram): to see which ads bring people who actually use the site, Google and Meta receive the measurements described in “Who We Share Data With” below, and Meta may use them to show our ads to people similar to our users. You can turn this off with “Decline” in the cookie banner. We also use Google Analytics, Microsoft Clarity and our server logs to see, in aggregate, how the site is used, so we can improve it.

Legal Basis for Processing

Where Armenian or other applicable data protection law requires a legal basis, we rely on: performance of a contract (providing the account, quiz and online lesson features you sign up for); our legitimate interest in keeping the platform secure, improving it and measuring our advertising — this covers the server logs and the analytics and advertising cookies, which are on by default and which you can refuse at any time with “Decline” or “Cookie settings”; and your consent where you've given it, such as by submitting the Contact form, agreeing to reminders or allowing your camera and microphone in a lesson. In the European Economic Area, the United Kingdom and Switzerland, Google's analytics and advertising cookies are used only with your consent.

Who We Share Data With

We share limited data only as follows:

• Telegram — receives the content of Contact form submissions so our team can read and respond to them. If you sign in with Telegram, Telegram confirms your identity to us; it learns that you signed in to bibip.am, under its own privacy policy.
• Google — we use Google Analytics 4 to measure how the site is used in aggregate (pages viewed, the referring site, device and browser type, and approximate location derived from your IP address) and to count new accounts: when an account is created, Google receives only how it was created (email, Google or Telegram), nothing from the account itself. We also advertise on Google Ads: the Google tag tells Google when someone who clicked one of our ads visits the site or creates an account, so we can see which ads work, and it sets Google's advertising cookies for this. Our Contact page can also display a Google Maps location. These cookies are on by default; after you click “Decline” (and, in the EEA, the UK and Switzerland, until you click “Allow”), Google receives only basic measurements without cookies, and no cookie or other identifier is stored on your device. Google processes this data under its own privacy policy. You can also opt out of Google Analytics with Google's browser add-on at tools.google.com/dlpage/gaoptout.
• Meta (Facebook) — unless you click “Decline”, we load the Meta Pixel and Facebook's JavaScript SDK. They report to Meta that a page was viewed, that a registration was completed, and progress such as starting or passing an exam, answering 20 practice questions or coming back the next day; the same events are also sent to Meta from our server (Meta Conversions API) together with your IP address, browser type, Meta's cookie identifiers (_fbp, _fbc) and our anonymous visitor id. If you are signed in or have just registered, the events can also include your account's email address, name, phone number (if you added one) and account id — never in clear text, only as one-way hashes (SHA-256) that Meta uses to match the events to its users. We use this to measure our advertising and to build audiences for it; the Meta Pixel also sets Meta's cookies (_fbp, _fbc) on your device. After you click “Decline”, nothing more is sent to Meta, the Meta Pixel and the SDK are no longer loaded, and Meta's cookies and our visitor id are removed from your device. You can change your choice at any time via “Cookie settings” at the bottom of the page. Meta processes this data under its own privacy policy.
• Microsoft Clarity — unless you click “Decline”, we load Microsoft Clarity, a tool that shows us in aggregate how visitors use the pages (clicks, scrolling, anonymized session recordings) so we can fix confusing screens. Input fields are masked and never recorded, and Clarity is not loaded on your profile pages. We don't send it your name, email address or any other account details. After you click “Decline”, Clarity stops recording and is no longer loaded; you can change your choice at any time via “Cookie settings” at the bottom of the page. Microsoft processes this data under its own privacy policy.
• Push services (Google, Mozilla, Apple, Microsoft) — if you switch on review reminders, your browser's own push service relays the notification to your device. It sees the notification address and the fact that a message was sent, but not its contents: the notification is encrypted with keys only your browser holds. Which service is used is decided by your browser, not by us, and it processes the delivery under its own privacy policy.
• LiveKit (LiveKit, Inc.) — carries the video, sound and live data of online lessons. It receives your account's internal identifier and the name you chose for the lesson, the video and sound you switch on and your chat messages, plus technical connection data such as your IP address, and relays them to the other participants. We don't use it to record lessons. LiveKit processes this data under its own privacy policy.
• Google and jsDelivr — only if you switch on background blur in an online lesson: your browser downloads the blur model from storage.googleapis.com and cdn.jsdelivr.net, which see your IP address as with any downloaded file. The blur itself runs on your device, and no video is sent to them.
• Our hosting and database provider — stores the application database (account, quiz, and admin-managed data) on our behalf, under contract, solely to run the service.

Data Retention

We keep your account and quiz history for as long as your account exists, so your progress and score history stay available to you. Saved questions stay in your account until you remove them. If you'd like your account and associated data deleted, contact us and we will remove it, subject to anything we're legally required to keep. Contact-form messages are not stored in our database once forwarded. Server logs are kept for as long as we need them for security, troubleshooting and aggregate statistics. Rate-limiting data lives only in memory and clears automatically. The reminder delivery log (user id, reminder number, channel, status, date) is kept while your account exists; after you unsubscribe, no further reminders are sent. Records of the lessons you signed up for and came to are kept while your account exists; the video, sound, chat and board of a lesson are not stored.

Your Rights

Depending on applicable law, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• request deletion of your account and associated data;
• object to or restrict certain processing;
• receive a copy of your data in a portable format.

Children's Privacy

bibip is intended for people preparing for Armenia's driving theory exam, which may include users under 18. We don't knowingly collect more from a younger user than from any other user — an email address, name, and password to create an account — and there are no ads on the site. If you're a parent or guardian and believe your child has created an account you'd like removed, contact us.

Data Security

We take reasonable technical measures to protect your data, including hashing passwords, restricting admin functionality to authenticated administrator accounts, and enforcing account blocks that immediately prevent a blocked user from logging in, starting quizzes, submitting answers, or resetting their password. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Where Your Data Is Stored

Our database and application are hosted with our infrastructure provider, which may process and store data outside of Armenia. By using bibip, you understand your data may be transferred to and processed in a country other than your own. Our team also keeps backup copies of the database and copies of the server logs on its own computer, for recovery and for aggregate statistics; the statistics are calculated from a copy without email addresses, names or phone numbers, in which IP addresses are replaced by a one-way hash. During an online lesson, its video, sound and live data pass through LiveKit servers, which may be outside Armenia.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page.

Contact Us

If you have questions about this policy or want to exercise your data rights, contact us: